Silent Signal, a Hungarian security firm, writes about penetration testing, IBM i hacking, exploits, and vulnerability tools.
HN commenters link it for technical security write-ups, such as UUID weaknesses in standard libraries and hacking the Java debug wire protocol.
It depends. I wrote a blogpost about the security implications of UUIDs back in February (https://blog.silentsignal.eu/2017/02/17/not-so-unique-snowflakes/) and it shows that not all standard libraries make secure-by-default easy for the developer. I developed a MIT licensed plugin for Burp Suite (https://github.com/silentsignal/burp-uuid) that can help pentesters and security minded developers to detect insecure UUID versions, and even in that plugin I described version 4 UUIDs as "randomly generated, although [their] entropy should be checked".
https://blog.silentsignal.eu/2014/02/09/jdb-tricks-hacking-java-debug-wire/